Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2b2c80a2-dd4f-365d-be34-67bbc6e3dbed.roa
File:                     2b2c80a2-dd4f-365d-be34-67bbc6e3dbed.roa (raw, json)
Hash identifier:          J9cd0TMhP+g7X3UqJZ73lPkS8+6z9AhBunbn0eSvOdA=
Subject key identifier:   E4:84:B1:66:94:E0:36:E6:C6:DF:BD:FA:9F:4A:25:53:C6:F6:39:40
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858471775C0FCA9BB6D73D55DE260
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2b2c80a2-dd4f-365d-be34-67bbc6e3dbed.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     23520
IP address blocks:        63.245.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:c0:fc:a9:bb:6d:73:d5:5d:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=e59dba10-e39f-4558-b660-379cbababfea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:16:e6:47:fe:53:07:e7:8c:0c:aa:fa:28:77:
                    7f:6d:27:fd:9f:e5:9e:dc:47:40:51:63:5b:be:32:
                    65:75:04:a5:67:0f:b8:41:be:96:7d:85:a1:4c:c5:
                    5e:67:3c:53:4f:d5:be:71:cd:c6:d0:9d:38:6a:a6:
                    ec:f0:4b:3f:eb:9e:35:9e:5d:cf:01:37:c1:4f:2a:
                    a2:67:30:b9:be:5b:e5:ab:f4:e8:3d:b7:00:58:0c:
                    69:c4:03:33:33:79:b3:13:c7:e2:51:f7:c1:5e:36:
                    7b:d9:3c:6e:93:4f:2c:89:92:89:2e:fc:9a:00:b3:
                    02:21:d4:1e:ce:0f:36:f9:1d:08:b6:20:62:7c:51:
                    a5:48:9f:de:5b:e6:c1:c4:84:bf:db:fc:22:2b:26:
                    b2:50:fd:2d:4a:41:60:e3:56:25:e9:1a:33:07:52:
                    78:21:de:bb:82:5b:76:00:9d:38:71:ec:6e:a8:66:
                    c5:96:00:82:ca:0f:62:1d:e4:34:21:06:ed:a6:93:
                    ee:4c:3b:39:13:08:5e:d6:80:71:d7:71:6a:49:13:
                    64:a8:1b:b1:f4:33:f2:c7:30:0b:a1:6f:ac:08:bf:
                    48:b4:ed:1e:71:cc:09:83:c0:8b:ab:c3:1f:93:6f:
                    ff:5b:36:85:30:ff:d7:4c:f4:82:75:ee:f1:4a:3f:
                    2a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:84:B1:66:94:E0:36:E6:C6:DF:BD:FA:9F:4A:25:53:C6:F6:39:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2b2c80a2-dd4f-365d-be34-67bbc6e3dbed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ac:36:90:29:ca:79:5d:6d:7d:5c:10:fe:2d:2d:99:bb:86:
         12:c5:7f:a7:ff:8f:ab:35:c4:3b:f0:cf:c7:62:57:c3:d8:a6:
         dd:dc:cb:84:c7:94:8a:a1:68:31:57:d7:d4:89:ba:4e:56:9a:
         d9:a8:78:50:e8:ab:a4:50:d5:a2:6c:be:5d:5e:d2:29:e3:39:
         93:56:d3:b3:9e:84:a4:39:bc:ce:11:0e:c6:87:6e:9a:69:78:
         2d:48:75:ef:c6:6d:dd:06:bf:3e:40:b0:16:d2:dd:46:cd:c1:
         40:f2:c5:64:2c:08:1b:c5:06:eb:47:3b:2c:99:dc:89:2c:58:
         5c:12:1c:e1:c7:d5:b4:c4:24:c9:0b:28:13:29:54:0e:48:3f:
         70:4d:73:44:bb:42:9c:eb:71:56:f4:4e:01:e2:d9:61:79:42:
         c5:ba:a1:42:fc:77:b1:16:fe:94:97:72:6e:69:99:6f:c3:ef:
         8a:e8:74:67:a3:8c:f6:61:e9:45:ee:1f:6a:08:f1:1b:6f:eb:
         fb:ce:3e:07:7e:f4:9d:4e:35:c4:69:0a:a3:5e:4f:40:55:c6:
         dc:60:49:34:8d:34:07:2a:da:fa:54:2b:3e:c7:b2:93:81:3f:
         1d:f8:95:e0:06:37:ac:3b:48:13:2c:65:2d:2b:31:fe:b1:ae:
         1a:c0:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:53 2024 by rpki-client on console-fra.rpki-client.org